42679 matches found
BELL-CVE-2026-31662
Bulletin has no description...
TOTOLINK A3300R hour parameter command injection vulnerability
TOTOLINK A3300R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK A3300R hour parameter, which originates from the cstecgi.cgi file failing to properly validate the hour parameter, and can be exploited by an attacker to execute...
CVE-2026-6878
Technical details are not publicly available in the provided documents for CVE-2026-6878. Monitor for updates as new information may be added.
CVE-2026-35231
...
CVE-2026-22017
...
CVE-2025-62594 vulnerabilities
Vulnerabilities for packages: imagemagick...
GHSA-CJC8-G9W8-CHFW vulnerabilities
Vulnerabilities for packages: imagemagick...
RockyLinux 8 : .NET 8.0 (RLSA-2026:8468)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:8468 advisory. dotnet: .NET: Security Bypass and Denial of Service Vulnerability CVE-2026-26171 dotnet: .NET: Denial of Service via stack overflow CVE-2026-32203 dotnet...
CVE-2026-5898 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-QG3C-XM7Q-9C4X vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-VMW5-396H-99JH vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-XM5M-WGH2-RRG3 vulnerabilities
Vulnerabilities for packages: jfrog-cli, tekton-chains-fips, ratify, crossplane, chainctl, tekton-chains, zarf, cloudbeat-fips, commercial-chainloop-backend, skaffold, buildkitd, tflint-fips, image-factory-fips, tkn, trivy-operator-fips, slsa-verifier, aactl, teleport, kubescape, goreleaser,...
CVE-2026-27769
creationtimestamp| type| source ---|---|--- 2026-04-15 12:30:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjjvk3msii2m 2026-04-16 11:35:10+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mjmcwqgahd2b...
Use of a Broken or Risky Cryptographic Algorithm
Overview org.bouncycastle:bcprov-jdk14 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Use of a Broken or Risky Cryptographic Algorithm due to the generateCTR process in G3413CTRBlockCipher. An attacker can recover relationships between...
Linux Distros Unpatched Vulnerability : CVE-2026-6358
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in XR in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML...
CVE-2026-6179 Stored Cross Site Scripting in NightWolf Penetration Testing Platform
Stored Cross Site Scripting in NightWolf Penetration Testing Platform allows attack trigger and run malicious script in user's browser...
CVE-2026-6005
A flaw has been found in code-projects Patient Record Management System 1.0. The affected element is an unknown function of the file /hematologyprint.php. Executing a manipulation of the argument hemid can lead to sql injection. It is possible to launch the attack remotely. The exploit has been...
Wordfence Intelligence Weekly WordPress Vulnerability Report (March 30, 2026 to April 5, 2026)
Last week, there were 56 vulnerabilities disclosed in 50 WordPress Plugins that have been added to the Wordfence Intelligence Vulnerability Database, and there were 38 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to...
CVE-2026-33780
creationtimestamp| type| source ---|---|--- 2026-04-09 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities20260410 2026-04-09 22:32:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3ufqogbt2i...